diff --git a/.github/workflows/assign-issue-pr.yaml b/.github/workflows/assign-issue-pr.yaml
index 6ffec5c..c10a224 100644
--- a/.github/workflows/assign-issue-pr.yaml
+++ b/.github/workflows/assign-issue-pr.yaml
@@ -1,4 +1,10 @@
+# Automatically assign new or reopened issues and pull requests in this
+# repo to Doug
+
 name: Assign Issue/PR
+
+permissions: {}
+
 on:
   issues:
     types:
@@ -8,9 +14,11 @@ on:
     types:
       - reopened
       - opened
+
 jobs:
   auto_assign:
+    name: Automatically assign new or reopened issues and pull requests to Doug
     permissions:
-      issues: write
-      pull-requests: write
-    uses: UBC-MOAD/gha-workflows/.github/workflows/auto-assign.yaml@main
+      issues: write  # Required to add assignee to issues
+      pull-requests: write  # Required to add assignee to pull requests
+    uses: UBC-MOAD/gha-workflows/.github/workflows/auto-assign.yaml@main  # zizmor: ignore[unpinned-uses]
diff --git a/.github/workflows/sphinx-linkcheck.yaml b/.github/workflows/sphinx-linkcheck.yaml
index db710b3..51ffbba 100644
--- a/.github/workflows/sphinx-linkcheck.yaml
+++ b/.github/workflows/sphinx-linkcheck.yaml
@@ -1,5 +1,7 @@
 name: sphinx-linkcheck
 
+permissions: {}
+
 on:
   push:
     branches: ['*']
@@ -11,7 +13,8 @@ on:
 
 jobs:
   sphinx-linkcheck:
+    name: Sphinx linkcheck
     permissions:
-      contents: read
+      contents: read  # Required to access the repository contents
 
-    uses: UBC-MOAD/gha-workflows/.github/workflows/pixi-sphinx-linkcheck.yaml@main
+    uses: UBC-MOAD/gha-workflows/.github/workflows/pixi-sphinx-linkcheck.yaml@main  # zizmor: ignore[unpinned-uses]